Will 2Do get read/write access to all my Dropbox files?

No. 2Do uses the sandboxed folder to store its files and can only read and write files it creates itself. It uses Dropbox's App Folder permission scope — only its own folder under Apps/ is accessible. All communication with Dropbox is over SSL.